This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft File: 5dJyqNwEH1rcer0A1k0_MsIE2rI.mft (raw, json) Hash identifier: DvFoUlOS7vGKH2iuEmYJLio1iF1fxDLJM72EKba2Fr8= Subject key identifier: AC:C3:03:43:01:A6:9B:08:24:19:92:B7:BB:3A:F2:F0:EF:1C:7E:83 Authority key identifier: E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 Certificate issuer: /CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Certificate serial: 019B3F1137149BF262E34DA5AD8A2B5FDB0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft Manifest number: 0E43 Signing time: Sun 21 Dec 2025 04:00:51 +0000 Manifest this update: Sun 21 Dec 2025 04:00:51 +0000 Manifest next update: Mon 22 Dec 2025 04:00:51 +0000 Files and hashes: 1: 5dJyqNwEH1rcer0A1k0_MsIE2rI.crl (hash: LgMhjGcIlaOL4PjwKs5YVDEA3HTUhVHJ/IGolYOfHnA=) 2: BSxB6YJq2jQPtYNgk4RjDz0LLwo.roa (hash: 0H0jQmEDdYcS0G88hDG7z0fv29sDbdsIXn2r0lKdjdI=) 3: DOxLN4SU2YKVe0VPHjqcaGZlpe0.roa (hash: SrolEIibncQUXL/HWDj/0Ei9nEoCbSOrTFYN2mtGMDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:37:14:9b:f2:62:e3:4d:a5:ad:8a:2b:5f:db:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5d272a8dc041f5adc7abd00d64d3f32c204dab2 Validity Not Before: Dec 21 04:00:51 2025 GMT Not After : Dec 22 04:00:51 2025 GMT Subject: CN=acc3034301a69b08241992b7bb3af2f0ef1c7e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2a:59:9a:91:da:d5:23:cc:fd:16:05:07:4c: 36:8c:65:26:04:17:11:85:41:ce:09:e8:e6:c5:ba: 9b:20:e2:db:1c:79:9e:bf:15:a7:3d:c2:52:af:4d: 1b:67:62:f7:af:63:4d:c6:16:fd:b0:cd:de:d0:c1: aa:b9:50:90:75:70:08:1b:34:7c:c8:af:e3:73:2b: 08:db:3e:1f:15:d9:1e:89:8d:59:80:94:75:6a:fe: 7e:20:f8:3a:20:47:8e:f8:59:50:3b:a2:00:1c:47: f7:eb:fe:79:40:72:c9:11:c6:88:57:d6:91:b5:7a: 51:28:0f:95:64:bc:d3:55:75:8a:cc:38:a7:f1:b9: 91:50:dc:51:db:09:92:a1:c7:57:1a:17:37:49:b9: c1:c5:28:e6:de:58:64:f0:a5:e8:fe:81:27:00:4b: 0a:26:7e:5b:07:fc:91:36:70:a4:fb:07:9c:cc:4e: ee:b7:4c:fa:60:5c:05:90:6d:95:2b:c3:e5:6b:94: 4f:c8:ac:51:47:73:8a:26:8c:25:9e:d3:66:0c:b6: 62:6f:87:de:8d:a8:78:d2:38:e9:4d:6d:0d:7a:65: 13:14:99:b7:c8:f9:74:3b:11:f8:9f:c9:4a:70:0c: b3:39:56:2a:e6:ee:10:13:9f:f7:7e:76:10:20:cc: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:C3:03:43:01:A6:9B:08:24:19:92:B7:BB:3A:F2:F0:EF:1C:7E:83 X509v3 Authority Key Identifier: keyid:E5:D2:72:A8:DC:04:1F:5A:DC:7A:BD:00:D6:4D:3F:32:C2:04:DA:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dJyqNwEH1rcer0A1k0_MsIE2rI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/417c1d-a2e4-44a6-af24-d4f5027600ae/1/5dJyqNwEH1rcer0A1k0_MsIE2rI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0c:72:20:c5:ef:e1:68:7f:76:b4:d6:b0:9d:48:80:ad:7a: cf:7e:0c:38:cd:cd:f9:6f:af:64:50:a4:5a:51:93:de:c9:45: ef:69:b8:be:54:e7:74:30:e4:03:74:03:84:17:31:db:53:c5: 13:8b:37:59:74:36:fe:b4:81:df:c7:6b:f4:6c:11:5e:f3:4d: c6:e9:e3:bb:7d:15:7b:90:6b:52:85:df:6a:93:17:4a:b8:f2: e7:e6:00:05:c9:4b:f3:1b:0b:a2:5a:af:40:d5:b6:80:63:f5: 0f:0e:aa:6b:4c:43:ed:06:06:24:da:09:a0:e2:51:fd:72:c3: fa:78:41:5f:ac:74:1b:fc:42:7b:9c:e8:9d:91:a9:9a:27:79: b3:8f:80:c7:6b:66:bf:e8:e4:45:69:3c:99:bd:41:5b:6f:de: c2:54:7e:55:89:e4:19:d1:33:88:8f:6c:fc:8e:a7:1a:44:f5: 18:8e:fa:94:5e:ea:c5:c3:24:4a:3a:c6:fe:c5:15:3e:ba:73: 29:2e:27:ea:c8:0f:ee:fe:28:07:0f:8f:da:cb:64:77:c7:bb: e6:2a:bd:c9:d0:2a:cc:0a:b7:f7:50:bd:c4:4b:62:d3:fd:6e: 0a:fd:89:00:5d:9a:8a:89:3c:8a:93:78:99:04:c1:b5:5f:16: 54:b0:49:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ETcUm/Ji402lrYorX9sPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ZDI3MmE4ZGMwNDFmNWFkYzdhYmQwMGQ2NGQzZjMyYzIw NGRhYjIwHhcNMjUxMjIxMDQwMDUxWhcNMjUxMjIyMDQwMDUxWjAzMTEwLwYDVQQD EyhhY2MzMDM0MzAxYTY5YjA4MjQxOTkyYjdiYjNhZjJmMGVmMWM3ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSpZmpHa1SPM/RYFB0w2jGUmBBcR hUHOCejmxbqbIOLbHHmevxWnPcJSr00bZ2L3r2NNxhb9sM3e0MGquVCQdXAIGzR8 yK/jcysI2z4fFdkeiY1ZgJR1av5+IPg6IEeO+FlQO6IAHEf36/55QHLJEcaIV9aR tXpRKA+VZLzTVXWKzDin8bmRUNxR2wmSocdXGhc3SbnBxSjm3lhk8KXo/oEnAEsK Jn5bB/yRNnCk+weczE7ut0z6YFwFkG2VK8Pla5RPyKxRR3OKJowlntNmDLZib4fe jah40jjpTW0NemUTFJm3yPl0OxH4n8lKcAyzOVYq5u4QE5/3fnYQIMx5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzDA0MBppsIJBmSt7s68vDvHH6DMB8GA1UdIwQY MBaAFOXScqjcBB9a3Hq9ANZNPzLCBNqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQt ZDRmNTAyNzYwMGFlLzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi80MTdjMWQtYTJlNC00NGE2LWFmMjQtZDRmNTAyNzYwMGFl LzEvNWRKeXFOd0VIMXJjZXIwQTFrMF9Nc0lFMnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASAxyIMXv 4Wh/drTWsJ1IgK16z34MOM3N+W+vZFCkWlGT3slF72m4vlTndDDkA3QDhBcx21PF E4s3WXQ2/rSB38dr9GwRXvNNxunju30Ve5BrUoXfapMXSrjy5+YABclL8xsLolqv QNW2gGP1Dw6qa0xD7QYGJNoJoOJR/XLD+nhBX6x0G/xCe5zonZGpmid5s4+Ax2tm v+jkRWk8mb1BW2/ewlR+VYnkGdEziI9s/I6nGkT1GI76lF7qxcMkSjrG/sUVPrpz KS4n6sgP7v4oBw+P2stkd8e75iq9ydAqzAq391C9xEti0/1uCv2JAF2aiok8ipN4 mQTBtV8WVLBJIA== -----END CERTIFICATE-----Generated at Sun Dec 21 09:01:02 2025 by rpki-client